abra-xas-wallet-usa[.]pages[.]dev

PhishDestroy identifies abra-xas-wallet-usa.pages.dev as a suspected crypto drainer impersonating a cryptocurrency wallet service. This domain appears designed to trick users into connecting their crypto wallets and then silently drain funds through malicious smart contract interactions. The site promotes itself as a legitimate wallet but is likely deployed to harvest private keys or seed phrases under false pretenses. This domain was flagged with a crypto drainer signature and is currently under investigation. VirusTotal detected 0/95 security engines flagged this domain as malicious as of the latest scan. It was registered through Cloudflare, Inc. using a Google Trust Services SSL certificate, and resolves to IP address 172.66.47.81. The seed identifier for this tracking record is 00e599, used to maintain consistent case context across investigations. If you visited abra-xas-wallet-usa.pages.dev, disconnect your wallet immediately using your wallet’s emergency disconnect feature or by revoking suspicious permissions via Etherscan or similar blockchain explorers. Do not approve any new transaction requests or sign messages from this domain. Scan your device for malware using reputable tools like Malwarebytes or Windows Defender. Report any unauthorized transactions to your wallet provider and local cybercrime units immediately. Change passwords and enable two-factor authentication on all related accounts. Monitor blockchain activity closely for signs of unauthorized transfers.